skysight-inc/HackerNews huggingface dataset:
>Could I sit down and write a web-facing server from scratch and have a reasonable expectation of safety? Probably not.

This is very suprising to me that people think this. I am not a fantastic programmer, but I don't see writing safe code diffucly at all, you just have to understand the basics how attacks work, and follow some basic rules when writing code.

In order for a piece of software to be exploitable, you need to have an input channel that is not isolated from the functionality- something like taking the parameters in the url and passing it directly to a shell is a massive failure in isolation.

As long as you do proper input sanitation, where the input must have certain format, and certain length for each part, and certain formatting for each part, the attack surface goes down to an absolute minimum. For example, for all the C/C++ code that I have seen that deals with web, only once I remember seeing a check on characters in the passed data being in the set of [0x10, 0x13, 0x20-0x7e], which should be the first check performed on any HTTP data passed to it, even before you start invalidating HTTP characters.

As far as memory safety goes, never rely on null terminated strings, allways copy the exact amount of data to a statically defined max, and make the buffer that holds data have the length max+1 with an extra byte that is allways set to null for every copy into the buffer. For malloc/free, design your code so that malloc and free are in the same function at the beggining and end, and allways run memcheck and valgrind before deploying to production.

Between all the other mechanisms in place, like non executable stack/heap, stack canaries, ASLR, and the tools like memcheck and valgrind, the possibility of you making an exploitable software is as low as coding it in a "proven safe" language (if such a thing exists) and messing up some parser input that can lead to unexpected behavior. And of course, there is still the possibility of using a library that has an exploit, or coding in an exploit in higher level logic, but that is a danger for any language.

I would bet that if taking an exploitation class for CS degrees was a hard requirement, where people understood the concept of stack, heap, and how the different types of exploits work, the outlook on this would change. I also wonder if teaching people C++ instead of C, and relying on built in memory management mechanisms to build software instead of making them manually write all the allocations by hand has an effect of a less understanding on what goes on under the hood.
This repo was created and last updated 3 years ago, the pfSesnse FreeBSD repo was last updated 19 hours ago (as of 09:34 UTC) I don't think this is relevant anymore but I don't have time to try to build / test it at the moment.
The title is not any more sensational than the subject is. Inter-satellite laser communications at scale is the entire selling point of Starlink. It's a major tech milestone, the success or failure of this system massively depends on it.
It wasn't posted this year yet. ;)
True enough yet here you are on hackernews which not only provides the tools but also has nice admins that will shadowban you (which makes the hn admins a set of 'tools' as well.)
> The web needs another platform for this, Mozilla can't be trusted.

You don't have to trust Mozilla. All written MDN content is licensed as CC-BY-SA-2.5, and all code snippets are either CC0 or, for snippets over a decade old, MIT.

And it's all in Git: https://github.com/mdn/content

So if the Web as a whole ever completely loses faith in Mozilla's ability to sustain the MDN platform, all of the content is licensed in such a way as to make it trivial to fork.

There was even an attempt at spinning out the docs ~8 years ago (https://webplatform.org/), which ultimately collapsed back into MDN.
Nice find. Seems like something created by a script. Show descriptions scraped from imdb, the trailers too I guess. I watched some and the crime featured in the news was perpetrated by black people...
Also the first has the title wrong, Quad instead of Adam, this led me to think about automation. But the Hot Wheels one has a news report about a teen hijacking a car, automated or not, that seems done on purpose.
While Firefox is my main browser, if you're a web dev, you need access to Chrome/Chromium so that you can test that your stuff works in the most popular browser, if nothing else.

Additionally, in my case, Chrome is the only browser that works with the Web Serial API, though other Blink based browsers ostensibly should support it.
Facebook.com Not Responding?
I think you should make a blog post with screenshots calling them out for this ridiculous hypocrisy.

Of its own the blog post won't do anything, but the next time they're being overeager and shutting down a legitimate customer, you can link to that and corner them to fix their procedures.
We also make a release branch (releases/x.y.z), tag a release candidate in it (x.y.z-RCn), build it, deploy it, wait for a bit (canary stage?), it we did not want to rollback: then merge it into master.
> There is no place for a pile of Bourne, m4, and perl in today's stack

What do you have against m4? It's a lovely little macro language.
https://downforeveryoneorjustme.com/facebook also says that it is not just me.

Update: But these two say it's up:

https://www.isitdownrightnow.com/facebook.com.html
https://downdetector.com/status/facebook/

... and a friend of mine in another European country says it works fine for him.
Remote MDX with Next.js
The comparisons to NLP presents a good view on the problems.

Its "easy" to write some logic rules to parse input text for a 50% demo. But then you want to improve & scale, and suddenly all the nuances, bites you. The rules get bigger, nested and complicated. Traditional NLP tried that avenue for a while, with decent success in small usecases, but for larger problems without success. (Compared to stuff like BERT & GPT, which still have a lot of problems)

Similar with Knowledge Graphs, you can show some nice properties on inferring knowledge on small problems, but the real world is much more approximate and unclear than some (binary) relationships.

Personally i think we Humans lack the mental capacity to build large models with complex interactions.
> But the alternative is sticking with the 9-5 grind. If you're like me, that terrifies the F out of you. I'm 42, have a great family, a good 9-5, but everyday of my life i think only of leaving my 9-5.

There's a quicker and 100% reliable way of getting out of the 9-5 grind: http://earlyretirementextreme.com. TLDR: reduce your expenses as much as possible (ideally to 10-20% of your post-tax earnings), save the rest and, over a couple of years, accumulate enough to just live off the savings (and investment income off the savings) till the end of your life. It's easy, certain and thus non-stressful - basically the opposite of the startup route. The drawback is that, for someone who's been living their life as an ultraspecialized consumer whose only skill is what he does at the well-paid job, while everything else (food production and preparation, home repairs etc.) is outsourced, it could be a shock to switch to a rennaisance man model.
Cool Vim Mini-Workflow
First-time API and SDK webinar: authorization mechanism in Wialon
An annotated version of this video would be amazing. What's happening at each moment? Where do the movements come from? What is happening when it "closes"?
When we ran HPC CFD models at university we would just use a head node and SLURM to schedule work on machines. It worked really well. I'm not really sure what benefit Kubernetes adds in this case? If anything I feel like it adds more complexity.

Would love to hear from the OpenAI folks as to why they chose to use Kubernetes for this problem.
What do you mean? If the call doesn't finish ITM, you collect premiums. If it does you're only missing on the upside. You don't make as much money as you could have, but either way you make a profit.

Or is that not how it works? I've never written my own options.
The whole point of the comment is that time outside matters more than what is done outside. I don't know the degree to which this is true but if you're going to watch something anyway, doing it outside instead of inside seems like not a bad plan. I don't think they intended anything by specifying tv and you could replace it with reading, board games, drawing, any activity commonly done inside.
Telematics market changed in 2020, what services became more sought-after
It's not quite a medieval society, but The Windup Girl https://www.goodreads.com/cs/book/show/6597651-the-windup-gi... feature a post-climate change world where most energy comes from beasts of burden, but there are still a few rare computers and staggeringly expensive carbon-fuelled vehicles.
“It’s just 1% of our users!”
The AI equivalent of this:

Growing Neural Cellular Automata - Differentiable Model of Morphogenesis

https://distill.pub/2020/growing-ca/
Earth losing 1.2T tons of ice each year. And it’s going to get worse
Am I the only one who doesn't like the show? I have seen everything upto S4E3 (or somewhere around that), and I must say its just horrible people with very few redeeming qualities. Its a difficult men show (yes Cameron is also a difficult Man), and I get that those are popular with people. But every other show like that that I actually like is more... fun. This one is just grim and dark and unrelenting in its difficult men tropes.
Greens: why we eat the leaves that we do (2013)
How to Migrate an App from Webpack to Snowpack
The internet also created new classes of crime. It doesn't mean we're worse off for liberalizing access to telecommunicatiom.

As for which I think is more likely, I think it's liberalization of finance and the retreat of the surveillance state. The new DeFi system is so much more efficient than the traditional financial system and the restrictions it's straddled with, that economic value will flow to it, and economic interests will trump the institutional inertia of the up-to-now steadily advancing surveillance state.

And it's fortunate too. If not for the sudden splash of financial liberalization brought about by cryptocurrency, the frog in the pot would have slowly been boiled by the creeping centralization of finance that has occurred over the last 40 years.

The last 40 years has seen regulatory institutions increase the restrictions they impose, the staff they employ, and the budgets they oversee, while becoming increasingly intertwined with the corporate giants they are meant to regulate through campaign contributions, political lobbying and the revolving door that exists between them and the private sector.
link to quoted research:

https://tc.copernicus.org/articles/15/233/2021/

https://advances.sciencemag.org/content/7/1/eaba7282.abstrac...
If these are uncommon enough, a Tesla could just stop on the side of the road and alert the driver. There will be a driver inside anyway. And there is a huge difference between "no L5, you have to keep an eye of the road every 10 seconds all the time", and "drives itself, but once every 2 hours, or in extreme weather conditions safely warns you and makes you take over and force you to drive yourself". This could very well be a great usecase, even if it won't drive itself for those 1% of cases.
> which is unnatural

There's nothing unnatural about Cs-137. Fission occurs naturally in U-235.
Do you know of any blog/papers which talks about this - using topology for such interval data types.
I got some cynical thoughts reading this well-done summary:

> There are few active developers and no continuing funders.

Like most open-source projects.

> There is no continuous integration

Like Signal.

> Bugs, feature requests, and submitted patches are not tracked systematically.

Like PostgreSQL.

> there is code shared among Autoconf, Automake, and/or Gnulib by copying files between source repositories

Like libmtp / libgphoto2.
I don't need Chrome/Safari/Edge/Brave/Opera to enjoy the web.

I have image viewers, audio players and video players that do the same job. I have text-only browsers that are much faster for reading HTML. And I have numerous TCP clients that retrieve web pages and resources as fast and usually faster than "modern" browsers, and are always more reliable. Heck, the W3C's libwww project still compiles and works well behind haproxy/stunnel. The functionality I need is fast, reliable text and URL retrieval.

I do need the big, graphcal browsers for online shopping, banking and so forth, but that is not what I am most of the time I am using the web. I do not need them to enjoy the web's content. I never expected I could survive without the graphics but it has been far easier than I thought, and it's getting easier.
It's hardly satire, unfortunately. In the old days, you had to have leaks like JournoList, GameJournoPros, or Wikileaks to find out the narrative mainstream journalists wanted to push.

Now you need only read journo Twitter. They're quite open about it.
Short answer is tradition. Historically they were able to stay on Moore's law with each new technology node representing the physical gate length. Currently however, even if they can't continue on that trajectory they still define the next technology node that way.
https://www.imdb.com/title/tt0751265/
That doesn’t pass the sniff test either. Articles of Unity was silenced during the entire period where it had any relevance and momentum. That the election has come and gone, and Weinstein has long stopped pumping it, explains 100 followers of a downstream account that I haven’t even heard of by the way as an avid Weinstein listener (both of them).

Weinstein says that Twitter never gave them a reason for the ban, and even after getting a line to Dorsey, the most Twitter would do is allow people to link to Articles of Unity on the app. It’s still banned. And when you link it PM, it still gives you a “suspicious content” warning[1]. That doesn’t just seem like a follower inflation punishment to me. It’s also not the precedent.

That defeats your theory on my eyes. As for a reasonable reason that AoU was banned, the most likely one to me is that someone at Twitter didn’t like that AoU was getting hashtags to trend that put people against both Trump and Biden during a critical moment in the race. Their movement would likely hurt Biden the most as it would splinter the “anyone but Trump” voter. Btw asking if Twitter banned AoU because Twitter hates unity is a very weak attempt at brainstorming the truth, is that really where your analysis ended?

Twitter has super selective inexplicable inconsistent bans all the time. Like “men aren’t women” getting you suspended while “kill all men” does not. Twitter has obvious heavy handed biases, so don’t overthink it.

[1] https://twitter.com/bootylactin/status/1351278941751926788
Lambda: The Microsoft Excel worksheet function
Same here. I made it part of the way through season one a second time but lost my patience for most of the relationship drama. It was fine the first time through, so I don't think it was a poor choice to have it in the show, but it does reduce its rewatch value.
It's definitely a prestige melodrama which makes it maudlin. One could recommend HBO's Silicon Valley as an antidote, but that's a comedy with cynical bittersweet tones. Perhaps one day someone will make a tech industry drama that's light and optimistic.
I did. Thank you for telling me about this experience. The world isn't simple, but at least it's interesting.
I didn't watch (yet) Halt and Catch Fire, but given your description, I think you would like Silicon Valley too. There the protagonist has a big idea but struggles to make it a real product. Also the jokes told there make it both really funny and interesting, because there's always something true about them.
Yeah, that whole car's tech didn't rely on expensive highdef maps.

> fully driverless

Don't they have safety drivers that closely monitor through wireless connection and often take over? While it might look driverless, it is not technically. This is also another reason why it doesn't scale.
Especially online video conferences have a tendency to require Chrome. Jitsi Meet works a lot better for everyone in the meeting due to (better?) Simulcast support. MS Teams and GoToMeeting outright refuse to work in Firefox.
I’d not say “intentionally” as I don’t think that this was the motivation behind the change. I’d consider it “knowingly” - they were or at least should have been aware that the change was going to create confusion about the license that individual code parts and changes were under. It was pointed out at that time.
PATH is one of those puzzling concepts that shell
beginners grapple with.

It’s a miracle that Windows and Unix converged a similar implantation.
Well it’s twofold: one is that security researchers will use bad passwords and click in shady links just like anyone else, and the second part is that even people with state-level adversaries that are actively trying to avoid getting hacked (journalists, whistleblowers, the like) get hacked anyways because they…carry an up-to-date flagship. There really doesn’t seem to be actual protections against a determined state actor short of not using computers…
You may like "The Vital Question" by Nick Lane, a book which presents one possible scenario in a quite readable way. Much of it is quite speculative of course, but you get a good idea what the basic principles are.
Can you share your script for that?
Okay if that's the case wouldn't you see similar result if kids watch at a sunny window. Light wise that's pretty similar.
Never seen this before, very interesting!

But how much can one realistically print?
500KB per page isn't much for today's data hoarding standards.

I guess you don't keep images?
Probably the latter. Doesn't mean he will be wrong, though.

I really don't get people's optimism here. This is not some doomsday prophecy divined from religious texts. It's a trend in the data - if nothing significantly changes, we're headed for a crash in the coming decades.

It's like watching a program with a memory leak - you see it ticking up in its memory usage, knowing that when it approaches 100%, it will crash. Oh, it didn't, because Haber-Bosch^W^Wthere was a swap drive? Well, the swap space isn't infinite either.

Sure, maybe skyrocketing oil prices won't crash the economy (though people seem to forget that oil isn't just fuel and energy, but also anything made from plastics - i.e. just about everything). But something else will give (likely the habitability of this planet). We need to step off the exponent, or ride it to space. But we can't fit it on Earth much longer.
Well because of tradition. Historically it made sense to define new technology node in terms physical gate length. But now even if that's not viable, they continue to do so for better marketing I guess.
TechTalks Sparks – Sponsorship for new or non-funded tech communities
It was a good nitpick since I read the first sentence and was really confused what the person was on about.
Why the Myth of Meritocracy Hurts Kids of Color (2017)
For sure if you want to use features that are only supported by Chrome. Also devtools are more comfortable and less buggy (seems that almost every React project I met would break Firefox at some point).
Nice thing about the title sequence for The Man in the High Castle is that it doubles as an prologue in setting the story. Much nicer than having to read (or have narrated) a background story to get things started.
Website Plan
One of the most important sources that keep you informed of everything new in the world of e-marketing\nDirect marketing, great commission rates, excellent support and lots of great services
If we were only talking about something that is dangerous at say, 100mph+, then sure - just drive slowly, it will be fine.

This is just isn't - this stuff will kill you in a 30mph collision. If you saw someone put a baby on the hood and drive around like that would you also say "oh do you expect these people to secure their babies for a one time trip - relax!". Like, it's just not safe. At all.

And the fact that it's a one-off makes it worse, not better - they won't be used to the handling a van this heavy, you will try to come to a stop and discover you're missing a car length - enough to get t-boned by a truck. I don't know why people treat it as some kind of wild and completely improbable incident that just won't ever happen - of course it will! These sort of things happen all the time!

>>not reasonable to expect them to implement a tie down solution that scales to that level

It's unreasonable to not expect them to.
Monetizing Bottoms Up SaaS
How to get through messy emotions as a Founder
> If my bike ride is just 5 minutes why bother wearing a helmet?

It reads much easier like this.
As a team of just me with not much savings, trying to make something that may grow quickly (1-10s of TBs), I cant afford to scale up from the get-go. I need to be able to scale out first. It doesn't seem Postgres is conducive to that. AFAIK clustering or sharing is not yet offered by the core.

In addition, I need to look more deeply into postgres but its considerations for things such as lazy replication (unreliable connections or offline/mobile users) don't seem any less complicated than other options.
still, changes between 9.6 and 12 are _numerous_, both in features and performance: llvm based query compilation, CTE de-materialisation, proper procedures, and that's just off the top of my head.

i wish the process for upgrading postgres were easier/more dynamic. i'm sure plenty of people are still using versions 9.6 or earlier.
I am pretty sure there is no replacement. However offtopic channels in slack to share some music, stories and interesting tech would always lead to nice short break convos
This only works if you have less than one release per day
The Epic, Absurdly Complex Battle Between a Zombie Maker and Its Victim
As a test case, i use box.com in combination with rclone and have daily backups for db and data of my servers.

It copies remotely to /{day of the month} + /{latest}

I could easily change my script to run every hour.

It works pretty nicely and i have a backup for 30 days

( Outside of the default backup daily ofc)
Tangent: Why do I so often get "connection interrupted" errors when trying to load lwn.net? (browser: firefox developer edition)
It seems like there was a vacuum going with IBM between 1933 and 1946?
Great resource! Almost mathy
This makes the assumption that all the RNA molecules of 50 bp length are "clean" chains of nucleotides, without any chemical modifications that break the replication process. This is highly unlikely if the RNA is not produced by existing enzymes, but by more or less random chemical processes.
I was gonna ask what you use it for :-)

Does anyone have experience with Bluetooth fold-up-keyboards? I'd imagine those with a tablet would be much more useable (I just carry a laptop, and tether with my phone, but wouldn't mind something smaller).
Despite the fact that the video is scientific you realy start to think about God. Who else could invent this? Amazing.
In the US all medications must be approved by the FDA before they can be used; therefore, technically all medications are banned by default. Since the FDA has not approved the vaccine it remains banned.
I think they use it to protect the social graph, tho I could be wrong. Would be interesting to find out more info.